[gtk+/gtk-2-24] Sanitize memory handling in cups_request_printer_list_cb



commit 3acacc0384dcce55927e8e4e7e6e12bab2243104
Author: Christophe Fergeau <cfergeau redhat com>
Date:   Thu Nov 22 18:04:48 2012 +0000

    Sanitize memory handling in cups_request_printer_list_cb
    
    gtk+ was trying to display already freed strings, leaking memory,
    ...I noticed this because I was getting weird blinking characters
    as the status of my cups printers, and valgrind confirmed something
    was wrong.
    
    https://bugzilla.gnome.org/show_bug.cgi?id=683072

 modules/printbackends/cups/gtkprintbackendcups.c |   15 ++++++++++-----
 1 files changed, 10 insertions(+), 5 deletions(-)
---
diff --git a/modules/printbackends/cups/gtkprintbackendcups.c 
b/modules/printbackends/cups/gtkprintbackendcups.c
index 2a60103..867baa6 100644
--- a/modules/printbackends/cups/gtkprintbackendcups.c
+++ b/modules/printbackends/cups/gtkprintbackendcups.c
@@ -1731,7 +1731,7 @@ typedef struct
   const gchar *member_uris;
   const gchar *location;
   const gchar *description;
-  const gchar *state_msg;
+  gchar *state_msg;
   const gchar *reason_msg;
   PrinterStateLevel reason_level;
   gint state;
@@ -1767,7 +1767,7 @@ cups_printer_handle_attribute (GtkPrintBackendCups *cups_backend,
   else if (strcmp (ippGetName (attr), "printer-info") == 0)
     info->description = ippGetString (attr, 0, NULL);
   else if (strcmp (ippGetName (attr), "printer-state-message") == 0)
-    info->state_msg = ippGetString (attr, 0, NULL);
+    info->state_msg = g_strdup (ippGetString (attr, 0, NULL));
   else if (strcmp (ippGetName (attr), "printer-state-reasons") == 0)
     /* Store most important reason to reason_msg and set
        its importance at printer_state_reason_level */
@@ -2157,8 +2157,8 @@ cups_request_printer_list_cb (GtkPrintBackendCups *cups_backend,
 
           if (tmp_msg2 != NULL)
            {
+             g_free (info->state_msg);
              info->state_msg = tmp_msg2;
-             g_free (tmp_msg2);
            }
        }
 
@@ -2186,14 +2186,18 @@ cups_request_printer_list_cb (GtkPrintBackendCups *cups_backend,
           if (info->reason_level >= GTK_PRINTER_STATE_LEVEL_WARNING)
             {
               if (strlen (info->state_msg) == 0)
-                info->state_msg = reason_msg_desc;
+                {
+                  g_free (info->state_msg);
+                  info->state_msg = reason_msg_desc;
+                  reason_msg_desc = NULL;
+                }
               else
                 {
                  gchar *tmp_msg = NULL;
                  tmp_msg = g_strjoin (" ; ", info->state_msg,
                                       reason_msg_desc, NULL);
+                  g_free (info->state_msg);
                   info->state_msg = tmp_msg;
-                 g_free (tmp_msg);
                 }
             }
          if (reason_msg_desc != NULL)
@@ -2222,6 +2226,7 @@ cups_request_printer_list_cb (GtkPrintBackendCups *cups_backend,
 
       /* The ref is held by GtkPrintBackend, in add_printer() */
       g_object_unref (printer);
+      g_free (info->state_msg);
       g_slice_free (PrinterSetupInfo, info);
 
       if (attr == NULL)


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]